Audit Planning and Risk Assessment CISA Practice Questions (Page 7)

Questions 31–34

1. 31expert · hard

   An audit manager is planning an audit of a critical system that is also undergoing a major upgrade. The audit team is small, and the upgrade is expected to take three months. The audit is scheduled to start in two months. The manager needs to decide how to allocate resources. Which of the following is the BEST approach?

   • AConduct a limited-scope audit of the current system and plan a follow-up audit after the upgrade.
   • BDelay the audit until after the upgrade is complete and the system is stable.
   • CIncrease the audit team size to complete the audit before the upgrade.
   • DStart the audit now and complete the testing before the upgrade begins.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In audit project management, what does the 'timeline' component primarily define?

   • AThe budget allocated for the audit
   • BThe number of auditors assigned to the engagement
   • CThe sequence and duration of audit activities
   • DThe criteria used to evaluate audit findings
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   An auditor is planning a review of the accounts payable process. The process uses an automated three-way match (purchase order, receiving report, and invoice) to approve payments. However, the auditor notes that the system does not automatically flag discrepancies; instead, a clerk manually reviews exception reports and decides whether to override the match. How should the auditor classify this control for testing purposes?

   • APreventive control, because the three-way match prevents incorrect payments.
   • BManual control, because the clerk's decision is the key control point.
   • CIT-dependent manual control, because the control relies on system-generated exception reports and manual review.
   • DAutomated control, because the three-way match is performed by the system.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the purpose of evaluating control design during audit planning?

   • ATo calculate the cost of implementing new controls
   • BTo assess whether controls, if implemented as designed, would adequately mitigate risks
   • CTo determine if controls are operating as intended
   • DTo assign responsibility for control implementation
   Reveal Solution Discussion Select an answer first